[Pkg-openssl-devel] broken backwards compatibility in Jessie: libssl1.0.0 (1.0.1k-3+deb8u1) doesn't allow SSLv3

Vincent Bernat bernat at debian.org
Mon Jul 6 08:04:03 UTC 2015


 ❦  6 juillet 2015 09:44 +0200, Andrey Arapov <andrey.arapov at nixaid.com> :

> I came across the problem when SSLv3 simply does not work with the
> current stable libssl1.0.0 (1.0.1k-3+deb8u1) in Debian Jessie (amd64).

SSLv3 has been disabled completely to circumvent CVE-2014-3566. It is
unlikely to be enabled again.
-- 
This night methinks is but the daylight sick.
		-- William Shakespeare, "The Merchant of Venice"
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 818 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-openssl-devel/attachments/20150706/67102d47/attachment.sig>


More information about the Pkg-openssl-devel mailing list